PT-2026-28179

CVE-2026-33699

Published

2026-01-01

Updated

2026-08-14

Description by

CVSS 2.0

7.8

High

MetricsAV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.9.2

Description pypdf is a free and open-source pure-python PDF library. A crafted PDF file can cause an infinite loop when read in non-strict mode. This issue requires reading a file in non-strict mode. Applying the changes from the patch manually is a potential workaround if upgrading is not immediately possible.

Recommendations Upgrade to version 6.9.2 or later. If an immediate upgrade is not possible, apply the changes from PR #3693 manually.

Exploitability

Exploit

Fix

Impacts

Researchers

Kejcao

Vendors

Affected products

Weakness enumeration

CWE-835: Loop with Unreachable Exit Condition (\'Infinite Loop\')

Related identifiers